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BACKGROUND 

This invention relates to the fields of computer systems and data 
10 communications. More particularly, a system and method are provided for 

verifying financial instruments or accounts, such as credit cards, debit cards, bank 
accounts, etc. 

Modem fmancial systems make it easy to perform financial transactions 
without using physical currency. For example, credit cards and ACH (Automated 
15 Clearing House) transactions (i.e., electronic checks) are increasingly used in 
place of cash to make purchases, transfer money, or engage in other financial 
transactions. 

These convenient instruments are, however, subject to theft and fraudulent 
use. A thief may obtain all the information needed to use a stolen credit card from 

20 the card itself, while all that is needed to conduct an ACH transaction (e.g., to 
withdraw money from a checking account) are the bank account and routing 
numbers from a check. It is then a simple matter for the thief or fraud artist to 
pose as the rightful owner or holder of a credit card or bank account. Existing 
safeguards against fraud (e.g., checking a credit card against a list of stolen cards, 

25 checking the name on a checking account before completing an ACH transaction) 
are often insufficient. It is typically the merchant, vendor, bank or other entity 
that accepts a credit card or electronic check transaction that is liable for the 
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amount of money that is stolen or misappropriated if the rightful owner or holder 
is not at fault. 

SUMMARY 

5 Therefore, in one embodiment of the invention a system and method are 

provided for verifying financial instruments or accounts^ such as credit or debit 
cards, bank accounts, and so on, in order to ensure that a person attempting to use 
such an instrument is authorized to do so. 

When a customer or user expresses a desire to use a certain instrument 

10 (e.g., to make purchases or fund transfers), the system initiates one or more 

verifying transactions using the instrument. Selected details of the transaction(s) 
are saved, particularly details that may vary from one transaction to another. Such 
variable details may include the number of transactions performed, the amount of 
a transaction, the type of transaction (e.g., credit, debit, deposit, withdrawal), the 

15 merchant name or account used by the system for the transaction, etc. 

The user then retrieves evidence of the transaction(s) from his or her 
financial institution, which may be accomplished on-line, by telephone, in a 
monthly statement, etc., and submits the requested details to the system. The 
submitted details are compared to the stored details and, if they match, the user is 

20 then allowed to use the instrument. If the verification fails, the user may be 

allowed to try again, offer different or additional verification, his or her account 
may be restricted, etc. 

DESCRIPTION OF THE FIGURES 

25 FIG. 1 is a block diagram of a system for verifying a potential user's 

authorization to use a financial instrument, in accordance with an embodiment of 
the present invention. 
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FIG. 2 is a flowchart illustrating one method of verifying a person's 
authorization to use a financial instrument, in accordance with an embodiment of 
the invention. 

5 DETAILED DESCRIPTION 

The following description is presented to enable any person skilled in the 
art to make and use the invention, and is provided in the context of particular 
applications of the invention and their requirements. Various modifications to the 
disclosed embodiments will be readily apparent to those skilled in the art and the 
10 general principles defined herein may be applied to other embodiments and appli- 
cations without departing from the scope of the present invention. Thus, the 
present invention is not intended to be limited to the embodiments shown, but is 
to be accorded the widest scope consistent with the principles and features 
disclosed herein. 

1 5 The program environment in which a present embodiment of the invention 

is executed illustratively incorporates a general-purpose computer or a special 
purpose device such as a hand-held computer. Details of such devices (e.g., 
processor, memory, data storage, display) may be omitted for the sake of clarity. 
It should also be understood that the techniques of the present invention 

20 might be implemented using a variety of technologies. For example, the methods 
described herein may be implemented in software executing on a computer 
system, or implemented in hardware utilizing either a combination of 
microprocessors or other specially designed application specific integrated 
circuits, programmable logic devices, or various combinations thereof. In 

25 particular, the methods described herein may be implemented by a series of 
computer-executable instructions residing on a suitable computer-readable 
medium. Suitable computer-readable media may include volatile (e.g., RAM) 
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and/or non-volatile (e.g., ROM, disk) memory, carrier waves and transmission 
media (e.g., copper wire, coaxial cable, fiber optic media). Exemplary carrier 
waves may take the form of electrical, electromagnetic or optical signals 
conveying digital data streams along a local network or a publicly accessible 

5 network such as the Internet. 

In one embodiment of the invention, a system and method are provided for 
verifying a financial instrument or account or verifying a user's authorization to 
use a financial instrument or account. A financial instrument or account may be 
defined to include credit cards, debit cards, bank accounts, brokerage accounts, 

10 money market accounts, and so on - virtually any entity that may be used as a 
source or destination of electronically exchanged value. 

More particularly, a system and method of the invention may be applied to 
ensure that a financial instrument identified by a user (e.g., as a source of fiinds) is 
actually owned or controlled by the user. The likelihood or risk that the user has 

1 5 stolen the instrument, and is now attempting to use it fraudulently, may therefore 
be determined to be lower than if the verification was not performed. 

In an embodiment of the invention, a series of transactions are performed 
using the instrument identified by the user. The transactions may include debits 
or credits to a credit card, deposits or withdrawals from a bank account, etc. 

20 Certain details of the transactions are recorded (e.g., amount, type of transaction, 
merchant identity, date or time of a transaction) and the user is invited to retrieve 
specified details (e.g., fi-om an account statement, by calling the holder or issuer of 
the instrument) and identify them to the system. If the user correctly identifies the 
specified details, the verification process is successfiil. If the user is unsuccessful, 

25 he or she may be given a limited number of additional opportunities to input the 
correct details and, if still unsuccessfial, may be barred fi^om using the instrument. 
In this embodiment, the user is required to pass his or her financial institution's 
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own verification/authentication process in order to obtain the necessary details of 
the transactions^ thereby making it even less likely that he or she is a fraudulent 
user. 

An embodiment of the invention may be used or applied for various 

5 reasons or in various situations. For example, a merchant may initiate or 

implement a verification process when a customer wishes to make a purchase 
(e.g., if the customer is new or if the cost of the purchase is relatively large). The 
customer may be able to rapidly retrieve the necessary details of the verification 
transactions by accessing them on-line (e.g., through a web site of her credit card 

1 0 issuer or bank) or by telephone. 

Another embodiment of the invention may be applied to prospectively 
verify a user's authority to use a financial instrument. For example, an on-line 
system may allow users to make fund transfers and/or purchases on-line. A user 
may identify a financial instrument that he would like to use but the on-line 

15 system may require the financial instrument, or the user's authorization to use the 
instrument^ to be verified before allowing the user to use it in the system. 

FIG. 1 depicts a system for verifying a user's control of or authorization to 
use a financial instrument, according to one embodiment of the invention. In this 
embodiment, system 100 includes user interface 102, database 104 and transaction 

20 processor 106. User interface 102 may operate on a web server, application 
server, data server or other computing device. In an alternative embodiment of 
the invention a user may interact with the system via a human agent or 
representative of the system, an interactive voice recorder or other means, in 
addition to or instead of user interface 102. Database 104 may be separate from or 

25 integrated with user interface 1 02 or the computer system on which the user 
interface executes. Transaction processor 106 may be configured for initiating 
transactions for one or more different types of financial instruments or. 
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alternatively, system 100 may include multiple transaction processors, in which 
case the capabilities of each may or may not overlap. 

User interface 102 is configured to receive user connections, such as from 
user 110, and may operate differently (e.g., display different web pages, forms or 

5 menus) depending on a user's status. For example, for a connection from a new 
user, interface 102 may present the user with a registration form, information 
about services offered by the system (e.g., electronic commerce, fund transfers), 
etc. A registration form may require the user to identify one or more financial 
instruments, any of which may then be verified according to an embodiment of the 

10 invention. For registered or other experienced users, interface 102 may present 
customized pages or displays, electronic commerce opportunities, etc. Such a 
user may be invited to identify a financial instrument or account for immediate or 
future use as a source or destination of funds. User interface 102 may be 
configured to accept connections via publicly available networks (e.g., the 

1 5 Internet), private networks and other dedicated or shared links, which may be 
wired or wireless. 

Transaction processor 106 is coupled to one or more financial systems or 
entities for processing financial transactions. Thus, financial system 120 may 
comprise an ACH (Automated Clearing House) vendor (e.g., a Treasury 

20 Management Service configured to handle ACH transactions such as electronic 
checks and deposits), a merchant acquirer or Treasury Management Service that 
handles credit card and/or debit card transactions, or some other entity. As 
specified above, system 100 may include multiple transaction processors. Each 
transaction processor may be configured for a different type of financial 

25 instrument and may interact with a different financial system or entity. 

Transaction processor 106 may be a separate or specialized element of system 100 
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(e.g., a computer server) or may be incorporated into another element of the 
system (e.g., a data server, web server). 

Financial system 120 is coupled to the user's financial institution 
corresponding to the financial instrument being verified. Financial institution 130 

5 may therefore be the user's bank, credit card issuer, brokerage, investment 
manager, etc. Financial system 120 may, in an embodiment of the invention, 
represent a collection of financial institutions and entities that communicate with 
each other by specified formats (e.g., for credit card, debit card and/or ACH 
transactions). Thus, financial system 120 may comprise financial institution 130. 

10 In one method of verifying a user's financial instrument or account 

through system 100, user 110 connects to system 100 and identifies an instrument 
or accoimt that he or she would like to use (e.g., as a source of funds for purchases 
or money transfers). User interface 102, or the server operating the user interface, 
passes the identifying information to transaction processor 106. Transaction 

15 processor 106 initiates one or more transactions, using variable details such as an 
amount of the transaction, type of transaction (e.g., deposit, withdrawal, debit, 
credit), different vendor names or identities, or other details that may be reported 
to or retrieved by a valid user or owner of the instrument. The transaction may be 
generated or constructed by user interface 102, transaction processor 106 or some 

20 other entity within system 100 (e.g., an application or data server). The generating 
entity also saves selected details of the transaction(s) to database 104. 

Transaction processor 106 then initiates the series of transactions through 
appropriate financial systems or entities (e.g., financial system 120), which 
execute the transaction(s) in conjunction with the user's financial institution 130. 

25 Thus, the transaction processor takes information regarding the transactions(s), 
changes it into a form that financial system 120 can understand or use, and then 
interacts with or otherwise passes it to the financial system. 
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User 110 obtains details of the transaction(s) from a statement from 
institution 130, from an on-line system provided by the institution, by calling the 
institution, etc. User 110 then re-connects to system 100 (e.g., through user 
interface 102) and provides the requested details. The system compares the 

5 details provided by user 1 10 v^ith the stored details and, if they match, authorizes 
or allows the user to use the instrument or take other desired action that may 
otherwise be prevented or denied. A more comprehensive method of the 
invention is described below in conjunction with FIG. 2. 

One result of implementing an embodiment of the invention may be to 

10 reduce fraud rates, charge-backs, rejections, etc., in order to reduce the cost of 
business for merchants and other entities. A merchant that accepts credit cards, 
debit cards, electronic checks or other instruments that can be verified through a 
method of the invention may perform such verification for all users, just for users 
deemed high risk, or for some other group of users. For example, if the merchant 

15 calculates or otherwise obtains a level of risk presented by a user, that level may 
determine whether the user presents a low enough risk that verification is 
lumecessary, high enough to warrant verification, or so high that the user should 
be rejected without even attempting to verify the user's selected instrument. 

Because the identity of a vendor (e.g., merchant) involved in a financial 

20 transaction is typically reported to a user, the specific vendor account or name 

used to perform a verifying transaction may be one of the details required of a user 
in order to verify a financial instrument. Thus, the entity (e.g., merchant, vendor, 
on-line service) performing or implementing a method of the invention may 
establish a number of vendor accounts with its merchant acquirer, credit card 

25 issuer or the bank or other institution through which it will initiate ACH and/or 
other transactions. Alternatively, instead of requiring separate accounts, the 
entity's bank, merchant acquirer or other financial system partner may allow the 
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entity to specify a merchant name, account, or other detail to be part of the 
transaction. 

Advantageously, the use of variable or different merchant names facilitates 

the use of an embodiment of the invention internationally. In particular, even if 
5 the verifying transactions are initiated in one currency and, at the user's end are 

converted into another currency, the merchant name or other variable identity can 

still be used as a verifying detail. 

If the manner in which verification transactions are handled causes some 

of the transaction information to be truncated or excised, the verification system 
10 (e.g., system 100 of FIG. 1) may structure transactions accordingly or take that 

handling into account when comparing stored transaction details against the 

details offered by a user. For example, if it is likely that part of a vendor name or 

account will be truncated, then that portion of a transaction may be reported in a 

way that prevents truncation of disambiguating information (e.g., by using a 
1 5 vendor name of ''2468AcmeCorporation" instead of "AcmeCorporation2468'')^ 

Then, as long as the user can provide the "2468Acme" portion, this may be 

considered to match the account name. 

FIG, 2 demonstrates one method of verifying a user's specified financial 

instrument or verifying the user's authority to use the instrument, according to one 
20 embodiment of the invention. In this embodiment, a user selects a credit card, 

debit card, bank account or other account that offers electronic checking or 

deposits, to be the sovirce of funds for purchases, money transfers or other 

transactions at a merchant (or other entity). 

In order to use variable or different merchant or vendor names/accounts 
25 for verifying transactions (as described above), the merchant may, prior to the 

illustrated method, establish multiple accounts with its credit card issuer or ACH 

vendor. 
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In state 202 of the method of FIG. 2, a user (or a user's agent) connects to 
the verification system, which may be implemented as part of an on-line or 
traditional merchant or, another entity that accepts payment in forms other than 
physical currency. This connection may be the user's initial contact with the 
5 system, in which case he or she may (or may be required to) verify a source of 
funds as part of a registration process. Or, this may be just one of many visits, but 
the user may be requesting a transaction (e.g., a purchase or fund transfer) that 
requires verification. 

In state 204, the user identifies one or more financial instruments (e.g., 

1 0 credit cards, debit cards, bank accounts, charge cards) or other sources of funds. 
Such an instrument or source may not be the one that the user is attempting, or 
desires, to use for a particular transaction. In particular, verifying any financial 
instrument or source of funds associated with the user may reduce the risk that he 
or she is a fraudulent user. Illustratively, the user may be required to provide 

1 5 (where applicable) an account name or number, the name of the registered 
owner/user, a physical (e.g., street) address associated with the instrument or 
account, a telephone number, a password or PIN, etc. In this embodiment of the 
invention, some or all of the electronic communications involving the system that 
contain financial or private data may be encrypted or otherwise protected. 

20 In state 206 the system determines whether verification is required before 

the user may use an identified financial instrument. This determination may be 
made on the basis of various risk factors and fi-aud profiles, which may differ in 
different embodiments of the invention. For example, if any of the information 
provided by the user does not correspond with the identified instrument, this may 

25 indicate higher risk and the need for verification. Some other risk factors may 
include: a recentiy changed address or telephone number associated with the 
instrument, the time of day during which the user has connected, the number or 
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amount of transactions the user wants to perform, the user's electronic address 
(e.g., IP - Internet Protocol) and whether it corresponds with his or her asserted 
physical address, and virtually any other activity that may be indicative of a risky 
or fraudulent user. Illustratively, domestic (i.e., United States) credit card users 
5 may not be subjected, in one embodiment of the invention, to verification of their 
credit cards, whereas all international users may require verification. Similarly, 
all bank accounts or other sources of electronic checks or debits may be deemed to 
require verification. If verification is required, the illustrated method continues at 
state 208; otherwise, the method ends. 
10 In state 208, the system (e.g., a user interface, web or apphcation server, 

transaction processor) generates a series of one or more verifying transactions 
P involving the identified financial instrument. Certain details may vary from one 

I fj transaction to another, thereby decreasing the likelihood that the user could guess 

^If them. Illustrative variable details include the number of transactions, type of 

V 1 5 transaction (e.g., deposit or withdrawal, debit or credit), amount of the transaction, 

J merchant name or account used in the transaction, etc. 

In one embodiment of the invention, a typical series of verifying 
C3 transactions may include two deposits (to a bank account) or credits (to a credit 

card), each of which is between $ 0.01 and $ 0.99 in value, and may involve 
20 different merchant identities (e.g., 1234XYZCorporation, 5160XYZCorporation). 
To decrease the cost of performing transactions in this embodiment, one or both 
of the deposit/credit amounts may be biased toward the lower end of the value 
range. 

In state 210, selected details (e.g., all or a subset of the variable details) of 
25 the transactions are saved (e.g., stored in a database) and the transactions are 

initiated (e.g., through transaction processors coupled to the appropriate financial 
systems or entities). The verifying transactions may be initiated all at the same 
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time, may be separated in time or sent through different financial systems or 
entities. Also, the verifying transactions may be joined with other transactions 
(e.g., a verifying deposit may be merged with a subscription fee being charged to 
the user), in which case details of the merged transactions would be saved for 
5 comparison with the details reported by the user. 

In optional state 212, the user may be notified (e.g., via electronic mail) 
that he or she should wait for or retrieve evidence of the transactions. The user 
may be notified when, or shortly after, the transaction is initiated. Or, the user 
may be notified after enough time has passed for the transaction to be completed. 

10 The user's evidence of the transaction(s), which should include all or a 

subset of the details of the transaction(s), may be in the form of a monthly 
statement mailed to the user from his or her financial institution. Or, the user may 
take a more proactive approach and access his or her instrument or account status 
on-line or via telephone. In some manner, the user obtains information regarding 

1 5 the transaction(s) . 

In state 214 the user (or an agent of the user) connects to the system and, 
in state 216, proffers or provides supposed details of the verifying transaction(s). 
Illustratively, the system (e.g., a user interface) may prompt the user to enter the 
amount of each transaction, the merchant name (or the variable part thereof), the 

20 type of transaction, and/or any other detail that was stored. 

In this embodiment, the system is configured to communicate with the 
user through a user interface. However, in altemative embodiments the user may 
be able to interact with human operators for all or any part of the verification 
process. 

25 In state 21 8 the system compares the stored details to the details proffered 

by the user. If they match (e.g., if the stored details include the proffered details) 
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the illustrated method continues at state 220, Otherwise, the method proceeds to 
state 222. 

In state 220, the system approves the user's use of the identified financial 
instrument, or allows some action that was previously disallowed due to 
5 questionable risk levels, and the method ends. 

In state 222, verification failed, in which case the user may be allowed to 
re-enter supposed details (e.g., up to some maximum number of times) or may 
have to provide different verification (e.g., by submitting a copy of a statement 
regarding the instrument - such as a monthly statement from the user's financial 
1 0 institution). Or, the system may restart the verification process, restrict the user's 
activity or use of the instrument, etc. the method may therefore end or return to a 
previous state. 

In one embodiment of the invention, if a user for whom a series of 
verifying transactions have been initiated does not return to the system to submit 
1 5 details of the transactions within a predetermined period of time (e.g., five days, 
two weeks, one month), he or she may be contacted (e.g., via electronic mail 
and/or telephone) and prompted to complete the process. 

The foregoing descriptions of embodiments of the invention have been 
20 presented for purposes of illustration and description only. They are not intended 
to be exhaustive or to limit the invention to the forms disclosed. Accordingly, the 
above disclosure is not intended to limit the invention; the scope of the invention 
is defined by the appended claims. 

25 
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